https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-9537.htmlhttps://patchthecve.com/cve/CVE-2024-9537.htmlWed, 17 Jun 2026 08:24:46 +0000CRITICAL 9.8: ScienceLogic SL1 (formerly EM7) is affected by an unspecified vulnerability involving an unspecified third-party component packaged with SL1. The vulnerability is addressed in SL1 versions 12.1.3+, 12.2.3+, and 12.3+. Remediations have been made available for all SL1 versions back to version lines https://patchthecve.com/cve/CVE-2022-48604.htmlhttps://patchthecve.com/cve/CVE-2022-48604.htmlWed, 17 Jun 2026 05:15:41 +0000HIGH 8.8: A SQL injection vulnerability exists in the “logging export” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.https://patchthecve.com/cve/CVE-2022-48603.htmlhttps://patchthecve.com/cve/CVE-2022-48603.htmlWed, 17 Jun 2026 05:15:41 +0000HIGH 8.8: A SQL injection vulnerability exists in the “message viewer iframe” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.https://patchthecve.com/cve/CVE-2022-48602.htmlhttps://patchthecve.com/cve/CVE-2022-48602.htmlWed, 17 Jun 2026 05:15:41 +0000HIGH 8.8: A SQL injection vulnerability exists in the “message viewer print” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.https://patchthecve.com/cve/CVE-2022-48601.htmlhttps://patchthecve.com/cve/CVE-2022-48601.htmlWed, 17 Jun 2026 05:15:41 +0000HIGH 8.8: A SQL injection vulnerability exists in the “network print report” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.https://patchthecve.com/cve/CVE-2022-48600.htmlhttps://patchthecve.com/cve/CVE-2022-48600.htmlWed, 17 Jun 2026 05:15:41 +0000HIGH 8.8: A SQL injection vulnerability exists in the “notes view” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.https://patchthecve.com/cve/CVE-2022-48599.htmlhttps://patchthecve.com/cve/CVE-2022-48599.htmlWed, 17 Jun 2026 05:15:41 +0000HIGH 8.8: A SQL injection vulnerability exists in the “reporter events type” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.https://patchthecve.com/cve/CVE-2022-48598.htmlhttps://patchthecve.com/cve/CVE-2022-48598.htmlWed, 17 Jun 2026 05:15:41 +0000HIGH 8.8: A SQL injection vulnerability exists in the “reporter events type date” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.https://patchthecve.com/cve/CVE-2022-48597.htmlhttps://patchthecve.com/cve/CVE-2022-48597.htmlWed, 17 Jun 2026 05:15:40 +0000HIGH 8.8: A SQL injection vulnerability exists in the “ticket event report” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.https://patchthecve.com/cve/CVE-2022-48596.htmlhttps://patchthecve.com/cve/CVE-2022-48596.htmlWed, 17 Jun 2026 05:15:40 +0000HIGH 8.8: A SQL injection vulnerability exists in the “ticket queue watchers” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.https://patchthecve.com/cve/CVE-2022-48595.htmlhttps://patchthecve.com/cve/CVE-2022-48595.htmlWed, 17 Jun 2026 05:15:40 +0000HIGH 8.8: A SQL injection vulnerability exists in the “ticket template watchers” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.https://patchthecve.com/cve/CVE-2022-48594.htmlhttps://patchthecve.com/cve/CVE-2022-48594.htmlWed, 17 Jun 2026 05:15:40 +0000HIGH 8.8: A SQL injection vulnerability exists in the “ticket watchers email” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.https://patchthecve.com/cve/CVE-2022-48593.htmlhttps://patchthecve.com/cve/CVE-2022-48593.htmlWed, 17 Jun 2026 05:15:40 +0000HIGH 8.8: A SQL injection vulnerability exists in the “topology data service” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.https://patchthecve.com/cve/CVE-2022-48592.htmlhttps://patchthecve.com/cve/CVE-2022-48592.htmlWed, 17 Jun 2026 05:15:40 +0000HIGH 8.8: A SQL injection vulnerability exists in the vendor_country parameter of the “vendor print report” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the databhttps://patchthecve.com/cve/CVE-2022-48591.htmlhttps://patchthecve.com/cve/CVE-2022-48591.htmlWed, 17 Jun 2026 05:15:40 +0000HIGH 8.8: A SQL injection vulnerability exists in the vendor_state parameter of the “vendor print report” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the databashttps://patchthecve.com/cve/CVE-2022-48590.htmlhttps://patchthecve.com/cve/CVE-2022-48590.htmlWed, 17 Jun 2026 05:15:39 +0000HIGH 8.8: A SQL injection vulnerability exists in the “admin dynamic app mib errors” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.https://patchthecve.com/cve/CVE-2022-48589.htmlhttps://patchthecve.com/cve/CVE-2022-48589.htmlWed, 17 Jun 2026 05:15:39 +0000HIGH 8.8: A SQL injection vulnerability exists in the “reporting job editor” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.https://patchthecve.com/cve/CVE-2022-48588.htmlhttps://patchthecve.com/cve/CVE-2022-48588.htmlWed, 17 Jun 2026 05:15:39 +0000HIGH 8.8: A SQL injection vulnerability exists in the “schedule editor decoupled” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.https://patchthecve.com/cve/CVE-2022-48587.htmlhttps://patchthecve.com/cve/CVE-2022-48587.htmlWed, 17 Jun 2026 05:15:39 +0000HIGH 8.8: A SQL injection vulnerability exists in the “schedule editor” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.https://patchthecve.com/cve/CVE-2022-48586.htmlhttps://patchthecve.com/cve/CVE-2022-48586.htmlWed, 17 Jun 2026 05:15:39 +0000HIGH 8.8: A SQL injection vulnerability exists in the “json walker” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.https://patchthecve.com/cve/CVE-2022-48585.htmlhttps://patchthecve.com/cve/CVE-2022-48585.htmlWed, 17 Jun 2026 05:15:39 +0000HIGH 8.8: A SQL injection vulnerability exists in the “admin brand portal” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.https://patchthecve.com/cve/CVE-2022-48584.htmlhttps://patchthecve.com/cve/CVE-2022-48584.htmlWed, 17 Jun 2026 05:15:39 +0000HIGH 8.8: A command injection vulnerability exists in the download and convert report feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system.https://patchthecve.com/cve/CVE-2022-48583.htmlhttps://patchthecve.com/cve/CVE-2022-48583.htmlWed, 17 Jun 2026 05:15:38 +0000HIGH 8.8: A command injection vulnerability exists in the dashboard scheduler feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system.https://patchthecve.com/cve/CVE-2022-48582.htmlhttps://patchthecve.com/cve/CVE-2022-48582.htmlWed, 17 Jun 2026 05:15:38 +0000HIGH 8.8: A command injection vulnerability exists in the ticket report generate feature of the ScienceLogic SL1 that takes unsanitized user controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system.https://patchthecve.com/cve/CVE-2022-48581.htmlhttps://patchthecve.com/cve/CVE-2022-48581.htmlWed, 17 Jun 2026 05:15:38 +0000HIGH 8.8: A command injection vulnerability exists in the “dash export” feature of the ScienceLogic SL1 that takes unsanitized user controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system.https://patchthecve.com/cve/CVE-2022-48580.htmlhttps://patchthecve.com/cve/CVE-2022-48580.htmlWed, 17 Jun 2026 05:15:38 +0000HIGH 8.8: A command injection vulnerability exists in the ARP ping device tool feature of the ScienceLogic SL1 that takes unsanitized user controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system.